Power Module Safety Circuit for Controller Communication Loss
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing functional safety mechanisms for industrial automation devices, such as medium voltage drives, are complex and costly due to the requirement of multiple intelligent devices like FPGAs and extensive development for compliance with standards like IEC 61508, necessitating a simpler and more cost-effective solution.
Innovation Solution
A functional safety mechanism that disables communication and power transmission between the controller and power modules in industrial automation devices using serial-based communications and communication monitoring circuitry, with diagnostic tests to verify circuit integrity, providing multiple levels of redundancy and compliance with safety standards.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple intelligent devices like FPGAs are used to implement functional safety mechanism, then reliability is improved, but device complexity and cost increase
Solution Approach 1:
The patent extracts the functional safety mechanism from the complex Black Channel communication system and implements it as a separate, dedicated circuit using simple logic gates and communication monitoring circuitry. This isolation allows the safety function to be implemented with minimal components while maintaining high reliability.
Solution Approach 2:
The patent replaces expensive intelligent devices like FPGAs with inexpensive, simple logic circuitry consisting of basic logic gates and monitoring circuits. These simple components are sufficient for the safety function and significantly reduce both component cost and design complexity.
2Reliability
If multiple intelligent devices like FPGAs are used to implement functional safety mechanism, then reliability is improved, but manufacturing cost increases
Solution Approach 1:
The patent replaces expensive intelligent devices like FPGAs with inexpensive, simple logic circuitry consisting of basic logic gates and monitoring circuits. These simple components are sufficient for the safety function and significantly reduce both component cost and design complexity.
Solution Approach 2:
The patent combines the functional safety mechanism with the existing communication infrastructure by using the same communication bus for both operational commands and safety monitoring. This integration eliminates the need for separate dedicated safety communication hardware, reducing overall system cost.
3Reliability
If extensive development work is performed to comply with functional safety standards, then reliability is improved, but development time and complexity increase
Solution Approach 1:
The patent incorporates safety monitoring and verification functions directly into the operational communication path, so that safety checks are performed automatically as part of normal communication operations. This preliminary integration ensures standards compliance is built-in rather than added later, reducing development complexity.
Solution Approach 2:
The communication monitoring circuitry serves dual purposes: it monitors safety conditions and simultaneously verifies communication integrity for operational commands. This multi-functionality reduces the need for separate safety-specific development work while ensuring comprehensive standards compliance.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method may include receiving, by respective processing circuitry of one or more power modules of an industrial automation device, a control signal from a controller of the industrial automation device. The power modules may include driver circuitry and a power converter that may provide power to a motor based on the signal. The method may also include, detecting, by the respective processing circuitry, a lack of communication from the controller based on the signal, and, in response to detecting the lack of communication from the controller, transmitting, by the respective processing circuitry, a first command to gating signal enable circuitry to disable the driver circuitry, and transmitting, by the respective processing circuitry, a second command to driver power circuitry to prevent power from being provided to the driver circuitry.